CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
The Hacker News
Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands
SonicWall has warned of active exploitation of two zero-day vulnerabilities impacting Secure Mobile Access (SMA) 1000 series appliances, one of which could be exploited to achieve arbitrary command ex ...
-
The Cyber Express
Three Russians Indicted in $62M Cybercrime Scheme Targeting U.S. Infrastructure
Three Russian nationals have been charged in a sweeping Russian cybercrime indictment tied to an alleged bulletproof hosting operation that U.S. authorities say enabled ransomware, malware, phishing, ...
-
TheCyberThrone
Microsoft Patch Tuesday – July 2026: The Largest Security Release in Microsoft’s History
By Pravin Kumar Karthikeyan | TheCyberThrone.inExecutive SummaryMicrosoft’s July 2026 Patch Tuesday marks a defining moment in the evolution of enterprise vulnerability management. With 570 vulnerabil ...
-
Ars Technica
Microsoft’s Secure Boot has been broken for a decade and no one noticed until now
SECURE BOOT NEEDS A REBOOT Old and forgotten “shims” Microsoft failed to revoke have made Secure Boot bypasses simple. Finger about to press a power button. Hardware equipment concept. Credit: Getty I ...
-
The Hacker News
Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack
Microsoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attackers are already exploiting. The release covers 622 of Microsoft's own CVEs by its Security Upda ...
-
The Hacker News
SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data
SAP has rolled out updates to address multiple vulnerabilities as part of its July 2026 security updates, including a critical flaw in SAP NetWeaver Application Server ABAP. The vulnerability in quest ...
-
security.nl
Kritiek VMware-lek kan aanvaller toegang tot Avi-loadbalancer geven
Een kritieke kwetsbaarheid maakt het mogelijk voor ongeauthenticeerde aanvallers om toegang te krijgen tot Avi-loadbalancers. Voor het beveiligingslek, dat door een onderzoeker van het NAVO Cyber Secu ...
-
The Hacker News
RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata
Cybersecurity researchers have disclosed details of two access control-related flaws impacting the RabbitMQ message broker service that could allow attackers to leak OAuth client secrets, expose enter ...
-
The Hacker News
11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot
Cybersecurity researchers have discovered 11 old, Microsoft-signed, Unified Extensible Firmware Interface (UEFI) applications that could be abused to bypass Secure Boot on most systems using the moder ...
-
security.nl
VS meldt misbruik van 18 jaar oud beveiligingslek in Cisco-routers
Een 18 jaar oude kwetsbaarheid in Cisco-routers is misbruikt bij aanvallen, zo waarschuwt het Amerikaanse cyberagentschap CISA. Het cross-site request forgery (CSRF)-lek in de webinterface, aangeduid ...